Lucene search
+L

Exploit for Improper Neutralization of Special Elements in Data Query Logic in Pab1It0 Azure_Data_Explorer_Mcp_Server

🗓️ 29 Apr 2026 21:16:37Reported by romain-deperneType 
githubexploit
 githubexploit
🔗 github.com👁 115 Views

CVE-2026-33980: KQL injection in adx-mcp-server via table_name enables query and command injection.

Related
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
security-advisories
29 Apr 202621:06
githubexploit
attackerkb
ATTACKERKB
CVE-2026-33980
27 Mar 202621:32
attackerkb
circl
Circl
CVE-2026-33980
25 Mar 202620:38
circl
cnnvd
CNNVD
Azure Data Explorer MCP Server 安全漏洞
27 Mar 202600:00
cnnvd
cve
CVE
CVE-2026-33980
27 Mar 202621:32
cve
cvelist
Cvelist
CVE-2026-33980 Azure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queries
27 Mar 202621:32
cvelist
euvd
EUVD
EUVD-2026-16878
27 Mar 202619:08
euvd
github
Github Security Blog
Azure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queries
27 Mar 202619:08
github
kitploit
Kitploit
CVE-2026-33980
3 Sep 202601:26
kitploit
nvd
NVD
CVE-2026-33980
27 Mar 202622:16
nvd
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Apr 2026 21:16Current
6.1Medium risk
Vulners AI Score6.1
CVSS 3.18.1 - 8.3
EPSS0.00396
SSVC
115